Repository Index

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp

Static code analysis for Kotlin

• static
• analysis
• kotlin
• codesmells

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

• static-analysis
• php
• type-inference
• security-analysis

It's not just a linter that annoys you!

• static-analysis
• linter
• static-code-analysis
• code-quality

🔰 Instant PHP quality checks from your console

• php
• static
• analytics
• code

An extensible multilanguage static code analyzer.

• code-analysis
• code-quality
• static-analysis
• static-code-analysis

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

• findbugs
• static-analysis
• code-analysis
• static-code-analysis

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

• mess-detector
• php
• pmd
• static-analysis

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

• findbugs
• java
• security-audit
• owasp

The repository host gives no description.

• hacktoberfest

A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects

• csharp-sourcegenerator
• hacktoberfest
• patterns
• contributions-welcome

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

• attack-surfaces
• pentesting
• security
• devsecops

Linting tool for CloudFormation templates

• continuous-testing
• unit-testing
• cloudformation
• aws

An analyzer library for C# and VB that uses Roslyn to produce refactorings, code analysis, and other niceties.

• hacktoberfest

A fist full of code metrics

• code-quality
• hacktoberfest
• maintainability
• software-quality

A static code analyser for annotated TODO comments

• go
• linters
• todo
• hacktoberfest